Job description

The Product Cybersecurity architect is responsible for ensuring that products are compliant with IEC 62443 security standards and maintaining a unified security architecture across business lines. Candidates should have strong cybersecurity background, experience with security solutions, project leadership in a matrix environment, and knowledge of security standards and protocols.

Responsibility

• Ensure that all projects have the right level of cybersecurity and succeed in 100% FCSR.
• Interface functionally with Cybersecurity leaders, architects, and advisors to collaborate on projects.
• Define Security Level and certification cybersecurity strategy for PP (62443 ready or certified).
• Master cybersecurity standards and policies.
• Optimize cybersecurity requirements considering project’s constraints.
• Standardize and reuse cybersecurity generic bricks.
• Define PP Cybersecurity Architecture and support training of teams.
• Maintain knowledge on operational security topics applicable to Schneider Electric.
• Treat all vulnerabilities impacting PP (impact analysis, action plan if needed).
• Build & deploy secure reference architectures aligned with IEC62443 security levels and requirements.
• Promote adoption of security platforming strategies.
• Provide support to technical invariants and guidance on their usage by offer management.
• Productization, commercialization, and marketing assistance from a cybersecurity standpoint.

Qualifications

• Strong background in cybersecurity and experience implementing security solutions.
• 5 to 8 years of relevant Product cybersecurity experience.
• Experience in securing critical products and solutions in development projects.
• Good social skills, empathy, passion, and drive for innovation.
• Experience in coaching, mentoring, leading teams in a matrix environment.
• Experience with complex technical projects in an Agile environment.
• In-depth knowledge of security standards (IEC 62443, ISO27001, GDPR etc.) and application to product, digital security.
• CISSP or CISM certification is a plus.